Privacy Policy

Last updated: September 23, 2026

This Privacy Policy describes how EDGE(“EDGE,” “we,” “us,” or “our”) processes personal information when you use edgejournal.no and the EDGE trading journal application. It should be read together with our Terms of Service and Cookie Policy.

1. Scope

This policy applies to personal data processed when you visit our website, create an account, use EDGE, join the waitlist, subscribe to EDGE Premium, or contact us.

2. Information we process

Depending on how you use EDGE, we may process the following categories of personal information:

Account, authentication, and profile information

• Email address and authentication credentials (via Supabase Auth)
• Authentication session tokens and security-related account events
• Profile and onboarding preferences (for example display name, instruments, trading style, and risk settings)
• Subscription status and entitlement information linked to your account

Trading journal and performance data

• Trades and related journal fields (instruments, prices, timestamps, notes, tags, scores, and similar entries)
• Trade executions and linked saved trading-account information
• Trade reviews, self-assessments, and replay/review metadata
• Custom strategies, setups, confluences, and taxonomy preferences
• Goals, goal check-ins, and progress data
• Behavioral and performance analytics derived from your journal data, including summaries shown in Dashboard, Analytics, Your Edge, and related features
• Trading mindset settings (for example mantra and focus state)

Saved accounts, payouts, and certificates

• Saved prop-firm or trading account labels, stages, and related account metadata
• Payout records and payout settings you enter into EDGE
• Uploaded payout certificate files and associated storage metadata

Uploaded screenshots and files

• Trade screenshot files you upload
• Storage paths and metadata needed to display and manage those files

AI Coach and automated insights

• Automated journal and performance analysis generated from your logged trades and related journal fields
• Coaching summaries, discipline scores, and insight text shown in AI Coach and related analytics views

AI Coach is generated from your journal data using rule-based analytics in EDGE. We do not send your journal content to OpenAI or another external large-language-model provider for AI Coach.

Subscription and billing-related information

• Subscription status, trial status, plan information, and billing identifiers synced from Stripe (such as Stripe customer and subscription IDs)
• We do not directly store full payment card numbers or CVV codes. Payment details are collected and processed by Stripe.

Waitlist and marketing attribution

• If you join the waitlist: email address, optional name, consent timestamp, signup source, and related waitlist metadata
• Optional first-touch attribution data such as UTM parameters, landing page URL, and referrer information captured when you join the waitlist

Cookies, storage, and marketing consent

• Your optional marketing-cookie choice (accepted or rejected), stored locally in your browser
• If you accept optional marketing cookies, Reddit Pixel-related event and identifier data may be processed by Reddit for advertising measurement

Technical and security information

• IP address, device/browser information, and request or application logs
• Hosting, delivery, and security events generated when you use EDGE

3. How we use information and legal bases

We process personal information for the purposes below. Where GDPR applies, we rely on the legal bases indicated.

• Providing EDGE and performing our contract with you — to create and manage your account, store and display your journal, provide Premium features, sync subscription status, and support normal use of the service. Legal basis: performance of a contract.
• Authentication and security — to sign you in, protect accounts, prevent abuse, and maintain service integrity. Legal basis: performance of a contract and, where applicable, legitimate interests in securing EDGE.
• Billing and subscription management — to process subscriptions, trials, founding offers, and customer billing support through Stripe. Legal basis: performance of a contract and compliance with legal obligations where applicable.
• Automated analytics and AI Coach — to generate performance, behavioral, and coaching insights from your journal data inside EDGE. Legal basis: performance of a contract.
• Waitlist administration — to record and manage waitlist sign-ups where that feature is offered. Legal basis: consent and/or steps taken at your request prior to entering a contract, depending on the specific waitlist use.
• Optional marketing measurement — to measure Reddit advertising performance through the Reddit Pixel, but only if you accept optional marketing cookies. Legal basis: consent.
• Support, compliance, and dispute handling — to respond to requests, enforce our terms, and comply with applicable law. Legal basis: legitimate interests and/or legal obligation, as applicable.

We do not sell your personal information. We do not use your journal content to provide investment advice, trade recommendations, or financial advice.

4. Cookies and optional marketing tracking

EDGE uses necessary storage for sign-in, security, and appearance preferences. These are required for the service to function and are not used for optional advertising.

Optional marketing cookies are used only if you choose Accept optional cookies in our cookie banner or cookie settings. If you reject optional cookies, Reddit Pixel does not load and normal EDGE functionality remains available.

You can change your cookie choice at any time through Cookie settings in the public footer or on our Cookie Policy page.

5. Payment processing (Stripe)

Paid subscriptions are processed by Stripe. When you subscribe, Stripe collects payment information according to its own privacy policy and terms. EDGE receives limited billing-related information from Stripe so we can activate and maintain your subscription.

See Stripe’s privacy practices at stripe.com/privacy.

6. Service providers and processors

We use trusted service providers to operate EDGE. Based on our current application architecture, these include:

• Supabase — authentication, database, and private file storage for account and journal data
• Stripe — subscription checkout, recurring billing, and customer portal
• Vercel — hosting and delivery of the EDGE web application
• Reddit — optional advertising measurement through the Reddit Pixel, only when you have accepted optional marketing cookies
• Rewardful — affiliate referral tracking, so partners who recommend EDGE can be credited; it loads only when you have accepted optional marketing cookies, and links your referral to your billing record in Stripe

These providers process data on our behalf under their own terms and security practices. We do not authorize them to use your journal content for their independent marketing purposes.

7. International transfers

EDGE is operated from Norway. If you use EDGE from outside Norway, your information may be processed in countries where our service providers operate, including within the EEA and potentially the United States or other countries.

Where personal data is transferred outside Norway or the EEA, we rely on appropriate safeguards required by applicable data-protection law, such as adequacy decisions, standard contractual clauses, or equivalent mechanisms offered by relevant providers, where applicable.

8. Retention

We retain personal information for as long as your account is active or as needed to provide EDGE, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods may vary by data type, billing records held by Stripe, backups, and legal requirements.

If you request account deletion, we will take reasonable steps to delete or anonymize personal information, subject to billing records held by Stripe, backup cycles, and legal retention requirements.

9. Security

We use measures appropriate to a web application, including encrypted connections (HTTPS), authenticated access controls, and database row-level security for user data isolation. No method of transmission or storage is completely secure.

10. Your rights

Depending on your location, and especially if GDPR applies, you may have the right to:

• request access to your personal information;
• request correction of inaccurate information;
• request deletion of personal information;
• request restriction of processing in certain circumstances;
• object to certain processing based on legitimate interests;
• request portability of information you provided, where applicable;
• withdraw consent at any time for processing based on consent, such as optional marketing cookies, without affecting the lawfulness of processing before withdrawal; and
• lodge a complaint with a supervisory authority, such as the Norwegian Data Protection Authority (Datatilsynet) in Norway.

To exercise these rights, contact us at ulrikwest@icloud.com.

Account deletion: EDGE does not currently offer a self-service delete-account button in the application. You may request account deletion by emailing us. We will verify your request before processing it.

11. Children

EDGE is not intended for users under 18 years of age (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children.

12. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Material changes may also be communicated through the application or by email where appropriate.

13. Contact

Privacy questions or requests can be sent to ulrikwest@icloud.com.